[squid-users] Squid and kerberos

From: Jürgen Obermeyer <squid_at_oegym.de>
Date: Thu, 25 Apr 2013 15:50:48 +0200

Hi everybody!

I would like to use Squid with kerberos authentication - it works, but
unfortunately, there are some computers in my network without kerberos
software. Accessing the web with Firefox is no problem - it prompts for
the username and password and accepts the input. But not IE: it prompts,
too, but the input is never accepted. This is my squid config:

*****

auth_param negotiate program /usr/lib/squid/squid_kerb_auth
auth_param negotiate children 16
auth_param negotiate keep_alive on
auth_param basic program /usr/lib/squid/pam_auth
auth_param basic children 16
auth_param basic realm Squid-Proxy
auth_param basic credentialsttl 2 hours

*****

My main idea is to try kerberos first, and if it fails, use basic
authentication. I don't understand why this works fine with Firefox, but
not with IE.

BTW: I know what means the "children" line, but I have no idea how to
find a reasonable number. Can anyone help me, please?

Thank you,

Jürgen
Received on Thu Apr 25 2013 - 13:50:52 MDT

This archive was generated by hypermail 2.2.0 : Fri Apr 26 2013 - 12:00:04 MDT